663d1f0afdc39eddecd647a64a5f8dd06a7e7eb7204b2594623f9dc31fdf6da6

Analysis

max time kernel
24s
max time network
47s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
21/10/2022, 02:17

Target

663d1f0afdc39eddecd647a64a5f8dd06a7e7eb7204b2594623f9dc31fdf6da6.exe
Size

196KB
MD5

5bda66e570456d12d7c3893f99ae6ce0
SHA1

09a8cfa1367c4c9a599457f71424acc8dd0f5cc2
SHA256

663d1f0afdc39eddecd647a64a5f8dd06a7e7eb7204b2594623f9dc31fdf6da6
SHA512

b8bca1f9160dee3a75e5a6d9aac779c8729da2823bcb868df086a4a0c993b8a5be7190753f1c4086b2bbcdf971fe589eb67567f7164a9afb543594171c48761c
SSDEEP

1536:kcRg8HecAiSgm6syVSeOo5B9FdQmiP0jrsqvOmJ7pSwFCIIhmV1bYLvQ64qL3zAQ:3K8mOJUmVtYLvQ7ezAyneLVtQ

Score

5^/10

Suspicious use of SetThreadContext 1 IoCs

description	pid	Process	procid_target
PID 1992 set thread context of 1728	1992	663d1f0afdc39eddecd647a64a5f8dd06a7e7eb7204b2594623f9dc31fdf6da6.exe	27

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1728	663d1f0afdc39eddecd647a64a5f8dd06a7e7eb7204b2594623f9dc31fdf6da6.exe
1728	663d1f0afdc39eddecd647a64a5f8dd06a7e7eb7204b2594623f9dc31fdf6da6.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1992	663d1f0afdc39eddecd647a64a5f8dd06a7e7eb7204b2594623f9dc31fdf6da6.exe

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 1992 wrote to memory of 1728	1992	663d1f0afdc39eddecd647a64a5f8dd06a7e7eb7204b2594623f9dc31fdf6da6.exe	27
PID 1992 wrote to memory of 1728	1992	663d1f0afdc39eddecd647a64a5f8dd06a7e7eb7204b2594623f9dc31fdf6da6.exe	27
PID 1992 wrote to memory of 1728	1992	663d1f0afdc39eddecd647a64a5f8dd06a7e7eb7204b2594623f9dc31fdf6da6.exe	27
PID 1992 wrote to memory of 1728	1992	663d1f0afdc39eddecd647a64a5f8dd06a7e7eb7204b2594623f9dc31fdf6da6.exe	27
PID 1992 wrote to memory of 1728	1992	663d1f0afdc39eddecd647a64a5f8dd06a7e7eb7204b2594623f9dc31fdf6da6.exe	27
PID 1992 wrote to memory of 1728	1992	663d1f0afdc39eddecd647a64a5f8dd06a7e7eb7204b2594623f9dc31fdf6da6.exe	27
PID 1992 wrote to memory of 1728	1992	663d1f0afdc39eddecd647a64a5f8dd06a7e7eb7204b2594623f9dc31fdf6da6.exe	27
PID 1992 wrote to memory of 1728	1992	663d1f0afdc39eddecd647a64a5f8dd06a7e7eb7204b2594623f9dc31fdf6da6.exe	27
PID 1728 wrote to memory of 1268	1728	663d1f0afdc39eddecd647a64a5f8dd06a7e7eb7204b2594623f9dc31fdf6da6.exe	14
PID 1728 wrote to memory of 1268	1728	663d1f0afdc39eddecd647a64a5f8dd06a7e7eb7204b2594623f9dc31fdf6da6.exe	14
PID 1728 wrote to memory of 1268	1728	663d1f0afdc39eddecd647a64a5f8dd06a7e7eb7204b2594623f9dc31fdf6da6.exe	14
PID 1728 wrote to memory of 1268	1728	663d1f0afdc39eddecd647a64a5f8dd06a7e7eb7204b2594623f9dc31fdf6da6.exe	14

memory/1268-61-0x000000007FFF0000-0x000000007FFF7000-memory.dmp

Filesize
28KB

Download
memory/1728-56-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/1728-59-0x0000000000400000-0x00000000004083A0-memory.dmp

Filesize
32KB

Download
memory/1728-60-0x0000000074AB1000-0x0000000074AB3000-memory.dmp

Filesize
8KB

Download
memory/1728-64-0x0000000010000000-0x0000000010012000-memory.dmp

Filesize
72KB

Download